Last Month in PHP - June 2012

Brief overview of important news stories and happenings in the PHP community in the previous month before this presentation was delivered.

Delivered at Kansas City PHP User Group on June 16, 2012

Transcript

1. Last Month in PHP
   June 16, 2012
   Kansas City PHP User Group
   John Kary
   @johnkary
   

   View Slide

2. New PHP versions released
   • PHP 5.4.4
   • PHP 5.3.14
   • Security: Heap overflow in phar lib
   • Security: crypt() fail when encoding key as Unicode
   string with Standard or Extended DES
   https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2143
   • Fix bug where redefining a private static method with
   a different method signature in an ancestor class
   caused crash when E_STRICT error reporting on
   

   View Slide

3. New PHP versions released
   class A
   {
   private static function test($a) { }
   }
   class B extends A
   {
   private static function test($a, $b) { }
   }
   

   View Slide

4. MySQL login vulnerability
   • MySQL <= 5.1.61
   • MySQL <= 5.2.11
   • MySQL <= 5.3.5
   • MySQL <= 5.5.22
   • Ubuntu Linux 64-bit
   10.04, 10.10, 11.04, 11.10, 12.04
   • OpenSuSE 12.1 64-bit
   MySQL 5.5.23-log
   • Debian Unstable 64-bit
   5.5.23-2
   • Fedora
   • Arch Linux (unspecified
   version)
   

   View Slide

5. MySQL login vulnerability
   • 1/256 chance login is successful with know username
   • http://seclists.org/oss-sec/2012/q2/493
   • https://community.rapid7.com/community/metasploit/blog/2012/06/11/
   cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql
   for i in `seq 1 1000`; do mysql -u root >>
   --password=bad -h 127.0.0.1 2>/dev/null; done
   

   View Slide

6. Conferences
   

   View Slide

7. php|tek 2012
   May 22-25, 2012
   Chicagoooo
   http://tek12.phparch.com/
   

   View Slide

8. php|tek 2012
   The MicroPHP Manifesto (Ed Finkler)
   Solving the N+1 Problem (Paul M. Jones)
   Javascript Best Practices & BackboneJS for the PHP Developer (Ryan Weaver)
   All Talks & Some Slides: https://joind.in/event/view/958
   

   View Slide

9. Symfony Live 2012 - Paris
   June 7-8, 2012
   Paris
   http://paris2012.live.symfony.com/
   Schedule: http://paris2012.live.symfony.com/speakers
   Slides: https://gist.github.com/2890651
   Symfony Certification via Sensio
   

   View Slide

10. Virtual REST Summit
    by php|architect Live!
    July 30th, 2012, 12:00 PM – 4:30 PM EDT
    Online!
    $20 tickets - Ends today!
    http://www.phparch.com/phparchitect-live-presents-virtual-rest-summit/
    

    View Slide

11. Virtual REST Summit
    by php|architect Live!
    http://www.phparch.com/phparchitect-live-presents-virtual-rest-summit/
    • What is REST?
    • HTTP fundamentals, beyond GET and POST
    • Hypermedia and HATEOAS
    • REST examples and use cases
    

    View Slide

12. New Developments
    

    View Slide

13. Zend Framework 1 + Composer
    http://twitter.com/weierophinney/status/212937337431261186
    

    View Slide

14. Zend Framework 1 + Composer
    http://packagist.org/packages/zendframework/zendframework1
    

    View Slide

15. Zend Framework 1 + Composer
    http://getcomposer.org/
    

    View Slide

16. Zend Framework 2 - Beta4 Released
    Official Announcement
    Rob Allen’s ZF2 Tutorial
    • Adds support for Composer
    • Rewritten Form component
    • Model and Validation are separate
    

    View Slide

17. Drupal 8 merges Symfony2 Components
    http://www.garfieldtech.com/blog/wscci-kernel-merge
    • HttpKernel
    • HttpFoundation
    • EventDispatcher
    

    View Slide

18. PSR-1 and PSR-2 Ratified
    Coding standards from the
    PHP Framework Interoperability Group (php-fig)
    PSR-1 coding standard
    PSR-2 coding standard
    PHP Framework Interoperability Group
    

    View Slide

19. PSR-1 and PSR-2 Ratified
    http://xkcd.com/927/
    

    View Slide

20. PSR-1 and PSR-2 Ratified
    • Another standard? Whyyyyy?
    • It’s not necessarily for YOUR codebase
    • Framework / Library interoperability
    Auto-fix your code to PSR-1/PSR-2
    https://github.com/fabpot/PHP-CS-Fixer
    Docs: http://cs.sensiolabs.org/
    

    View Slide

21. mojoLive
    Online resume and career management platform
    

    View Slide

22. mojoLive
    Online resume and career management platform
    

    View Slide

23. mojoLive
    Dan Holmes - http://mojolive.com/profile/dan
    John Kary - http://mojolive.com/profile/johnkary
    Invite Code
    KANSASCITYPHP
    http://mojolive.com/signup
    

    View Slide

24. fin
    

    View Slide